fix(deps): update all non major npm update

[dependency-control-plane]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@autifyhq/autify-sdk	^0.28.3 → ^0.30.1
@changesets/cli (source)	^2.27.0 → ^2.31.1
@eslint/eslintrc	^3.3.1 → ^3.3.7
@eslint/js (source)	^9.39.1 → ^9.39.5
@oclif/core	^4.8.0 → ^4.14.0
@oclif/plugin-help	^6.2.36 → ^6.3.0
@oclif/plugin-not-found	^3.2.73 → ^3.3.0
@oclif/plugin-update	^4.7.16 → ^4.8.0
@types/node (source)	^22.19.1 → ^22.20.2
eslint (source)	^9.39.1 → ^9.39.5
eslint-config-oclif	^6.0.118 → ^6.0.179
express (source)	^4.22.2 → ^4.22.3
get-port	^7.1.0 → ^7.2.0
lint-staged	^16.2.7 → ^16.4.0
node-stream-zip	^1.15.0 → ^1.16.0
npm (source)	>=11.10.0 → >=11.19.1
npm (source)	11.19.0 → 11.19.1
oclif	^4.22.47 → ^4.24.0
prettier (source)	^3.6.2 → ^3.9.6
ts-jest (source)	^29.4.5 → ^29.4.12
typescript-eslint (source)	^8.47.0 → ^8.70.0
winston	^3.18.3 → ^3.19.0

---

Release Notes

autifyhq/autify-sdk-js (@​autifyhq/autify-sdk)

v0.30.1

Compare Source

What's Changed

• [MOB-3663] List what a release ships in its PR body by @​xiankai in #​391
• [MOB-3663] Sync both clients by default, and skip if nothing to sync by @​xiankai in #​389
• Sync the mobile client with the Autify for Mobile API by @​github-actions[bot] in #​392
• Release 0.30.1 by @​github-actions[bot] in #​393

Full Changelog: autifyhq/autify-sdk-js@v0.30.0...v0.30.1

v0.30.0

Compare Source

What's Changed

• build(deps): bump brace-expansion by @​dependabot[bot] in #​375
• Fix lint so npm run generate runs end to end by @​xiankai in #​384
• Generate swagger-mobile.yml instead of hand-maintaining it by @​xiankai in #​385
• Sync the web client with the Autify Web API by @​xiankai in #​386
• Sync the generated clients on dispatch and before a release by @​xiankai in #​387
• Release 0.30.0 by @​github-actions[bot] in #​390

Full Changelog: autifyhq/autify-sdk-js@v0.29.1...v0.30.0

v0.29.1

Compare Source

What's Changed

• [MOB-3663] Regenerate the stale npm lockfile entry by @​xiankai in #​378
• Release 0.29.1 by @​github-actions[bot] in #​379

Full Changelog: autifyhq/autify-sdk-js@v0.29.0...v0.29.1

changesets/changesets (@​changesets/cli)

v2.31.1

Compare Source

Patch Changes

• #​2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

eslint/eslintrc (@​eslint/eslintrc)

v3.3.7

Compare Source

Bug Fixes

• Bump js-yaml to 4.3.1 (#​239) (f27e7c9)
• update js-yaml to 4.3.2 to address security vulnerability (#​243) (bb0d97a)

v3.3.6

Compare Source

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#​235) (0c5de74)

v3.3.5

Compare Source

Bug Fixes

• update dependency minimatch to ^3.1.5 (#​227) (3dc2381)

v3.3.4

Compare Source

Bug Fixes

• update ajv to 6.14.0 to address security vulnerabilities (#​221) (9139140)
• update minimatch to 3.1.3 to address security vulnerabilities (#​224) (30339d0)

v3.3.3

Compare Source

Bug Fixes

• release v3.3.3 because publishing v3.3.2 failed (#​211) (8aa555a)

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

v9.39.2

Compare Source

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#​20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#​20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#​20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#​20382) (Milos Djermanovic)

oclif/core (@​oclif/core)

v4.14.0

Compare Source

Features

• bumping to eslint v10 (W-23473845) (248de04)

4.13.5 (2026-08-14)

Bug Fixes

• replaced require with dynamic import (W-23807278) (d35e325)

4.13.4 (2026-08-14)

Bug Fixes

• resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3 (2026-08-04)

Bug Fixes

• deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2 (2026-07-27)

Bug Fixes

• deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1 (2026-07-27)

Bug Fixes

• deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

v4.13.5

Compare Source

Bug Fixes

• replaced require with dynamic import (W-23807278) (d35e325)

v4.13.4

Compare Source

Bug Fixes

• resolved security vulnerability in powershell path (W-23807278) (911e9d2)

v4.13.3

Compare Source

Bug Fixes

• deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

v4.13.2

Compare Source

Bug Fixes

• deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

v4.13.1

Compare Source

Bug Fixes

• deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

v4.13.0

Compare Source

Features

• expose root help formatter (644c4aa)

v4.12.0

Compare Source

Features

• add Args.option() for typed arg options (93139f7)

4.11.14 (2026-07-02)

Bug Fixes

• deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

4.11.13 (2026-07-02)

Bug Fixes

• deps: bump sigstore from 4.1.0 to 4.1.1 (5d7fe54)

4.11.12 (2026-07-02)

Bug Fixes

• deps: bump @​sigstore/verify from 3.1.0 to 3.1.1 (e00068f)

4.11.11 (2026-06-23)

Bug Fixes

• deps: bump undici from 6.25.0 to 6.27.0 (319945a)

4.11.10 (2026-06-22)

Bug Fixes

• deps: bump tinyglobby from 0.2.16 to 0.2.17 (f941872)

4.11.9 (2026-06-21)

Bug Fixes

• deps: bump tar from 7.5.12 to 7.5.16 (153400e)

4.11.8 (2026-06-21)

Bug Fixes

• deps: bump @​babel/core from 7.23.0 to 7.29.7 (3e552ea)

4.11.7 (2026-06-17)

Bug Fixes

• include error message in --json output (2cb3a76), closes #​1608

4.11.6 (2026-06-15)

Bug Fixes

• causative errors are now also pretty-printed. @​W-22797799@ (e4dd03c)

4.11.5 (2026-06-15)

Bug Fixes

• refactored shell identification code (a33c256)
• test failure (a6ebe3e)
• typo in powershell command (e8b6efa)
• windows shell identification is more reliable @​W-22969497@ (ee8376d)

4.11.4 (2026-05-23)

Bug Fixes

• deps: bump semver from 7.8.0 to 7.8.1 (65e054c)

4.11.3 (2026-05-15)

Bug Fixes

• updating tinyglobby dependency [skip-validate-pr] (1dc29ff)

4.11.2 (2026-05-09)

Bug Fixes

• deps: bump semver from 7.7.4 to 7.8.0 (1471fe3)

4.11.1 (2026-05-07)

Bug Fixes

• deps: bump ip-address from 10.1.0 to 10.2.0 (e36a6d8)

v4.11.14

Compare Source

Bug Fixes

• deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

v4.11.13

Compare Source

Bug Fixes

• deps: bump sigstore from 4.1.0 to 4.1.1 (5d7fe54)

v4.11.12

Compare Source

Bug Fixes

• deps: bump @​sigstore/verify from 3.1.0 to 3.1.1 (e00068f)

v4.11.11

Compare Source

Bug Fixes

• deps: bump undici from 6.25.0 to 6.27.0 (319945a)

v4.11.10

Compare Source

Bug Fixes

• deps: bump tinyglobby from 0.2.16 to 0.2.17 (f941872)

v4.11.9

Compare Source

Bug Fixes

• deps: bump tar from 7.5.12 to 7.5.16 (153400e)

v4.11.8

Compare Source

Bug Fixes

• deps: bump @​babel/core from 7.23.0 to 7.29.7 (3e552ea)

v4.11.7

Compare Source

Bug Fixes

• include error message in --json output (2cb3a76), closes #​1608

v4.11.6

Compare Source

Bug Fixes

• causative errors are now also pretty-printed. @​W-22797799@ (e4dd03c)

v4.11.5

Compare Source

Bug Fixes

• refactored shell identification code (a33c256)
• test failure (a6ebe3e)
• typo in powershell command (e8b6efa)
• windows shell identification is more reliable @​W-22969497@ (ee8376d)

v4.11.4

Compare Source

Bug Fixes

• deps: bump semver from 7.8.0 to 7.8.1 (65e054c)

v4.11.3

Compare Source

Bug Fixes

• updating tinyglobby dependency [skip-validate-pr] (1dc29ff)

v4.11.2

Compare Source

Bug Fixes

• deps: bump semver from 7.7.4 to 7.8.0 (1471fe3)

v4.11.1

Compare Source

Bug Fixes

• deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

v4.11.0

Compare Source

Bug Fixes

• integrated feedback from code review @​W-20534184@ (8d8a92d)

Features

• added basic constraint logic @​W-29534184@ (80000b3)
• added empty tests for command-level constraints @​W-20534184@ (45aaec7)
• added inline documentation @​W-20534184@ (3dc8757)
• defined tests and API for command-level constraints @​W-20534184@ (107531c)
• improved constraint docs @​W-20534184@ (40749c9)
• improved test coverage on constraints @​W-20534184@ (c7d570c)
• naive conditions implementation @​W-29534184@ (e4f4082)

4.10.6 (2026-04-25)

Bug Fixes

• deps: bump postcss from 8.4.31 to 8.5.10 (9b29ad4)

4.10.5 (2026-04-04)

Bug Fixes

• deps: bump minimatch from 10.2.4 to 10.2.5 (45ff39a)

4.10.4 (2026-04-03)

Bug Fixes

• deps: bump lodash from 4.17.21 to 4.18.1 (7db542d)

4.10.3 (2026-03-26)

Bug Fixes

• proper WSL handling @​W-18398048@ (ce37266)

4.10.2 (2026-03-21)

Bug Fixes

• deps: bump flatted from 3.3.2 to 3.4.2 (64f4b92)

4.10.1 (2026-03-20)

Bug Fixes

• refresh yarn.lock (745f56e)

v4.10.6

Compare Source

Bug Fixes

• deps: bump postcss from 8.4.31 to 8.5.10 (9b29ad4)

v4.10.5

Compare Source

Bug Fixes

• deps: bump minimatch from 10.2.4 to 10.2.5 (45ff39a)

v4.10.4

Compare Source

Bug Fixes

• deps: bump lodash from 4.17.21 to 4.18.1 (7db542d)

v4.10.3

Compare Source

Bug Fixes

• proper WSL handling @​W-18398048@ (ce37266)

v4.10.2

Compare Source

Bug Fixes

• deps: bump flatted from 3.3.2 to 3.4.2 (64f4b92)

v4.10.1

Compare Source

Bug Fixes

• refresh yarn.lock (745f56e)

v4.10.0

Compare Source

Bug Fixes

• include multiple property in cached arg metadata (32b4bb7)
• provide clearer messages on invalid variadic args (454ae3d)

Features

• add ArgDefinition overloads for variadic arg return types (6fea593)
• add definition-time validation for variadic arg constraints (20d2543)
• add multiple property to ArgProps interface (fb76263)
• allow array of default values for varargs (da42b29)
• implement variadic arg parsing with shift/pop algorithm (eba40b5)
• show ... suffix for variadic args in help text (fc53652)

v4.9.0

Compare Source

Features

• warn on hidden, deprecated aliases (af47f67)

4.8.4 (2026-03-09)

Bug Fixes

• --flags-dir works on 3rd party plugins @​W-21178947@ (8bd57c0)

4.8.3 (2026-03-02)

Bug Fixes

• expanded process title checks for windows shell identification @​W-21239801@ (d2c1913)

4.8.2 (2026-02-28)

Bug Fixes

• deps: bump minimatch from 10.2.1 to 10.2.4 (d1d9831)

4.8.1 (2026-02-22)

Bug Fixes

• deps: bump minimatch from 9.0.5 to 10.2.1 (2815e37)

v4.8.4

Compare Source

Bug Fixes

• --flags-dir works on 3rd party plugins @​W-21178947@ (8bd57c0)

v4.8.3

Compare Source

Bug Fixes

• expanded process title checks for windows shell identification @​W-21239801@ (d2c1913)

v4.8.2

Compare Source

Bug Fixes

• deps: bump minimatch from 10.2.1 to 10.2.4 (d1d9831)

v4.8.1

Compare Source

Bug Fixes

• deps: bump minimatch from 9.0.5 to 10.2.1 (2815e37)

oclif/plugin-help (@​oclif/plugin-help)

v6.3.0

Compare Source

Features

• bumping eslint to v10 (W-23473845) (489a2a1)

6.2.58 (2026-08-09)

Bug Fixes

• deps: bump @​oclif/core from 4.13.2 to 4.13.3 (#​1168) (b2b5095)

6.2.57 (2026-08-09)

Bug Fixes

• deps: bump js-yaml from 4.3.0 to 4.3.1 (#​1170) (1511d2f)

6.2.56 (2026-08-01)

Bug Fixes

• deps: bump @​oclif/core from 4.13.0 to 4.13.2 (#​1167) (eb6c62b)

6.2.55 (2026-07-26)

Bug Fixes

• deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#​1161) (ee83c65)

6.2.54 (2026-07-26)

Bug Fixes

• deps: bump js-yaml from 4.2.0 to 4.3.0 (#​1164) (2af73e4)

6.2.53 (2026-06-28)

Bug Fixes

• deps: bump @​oclif/core from 4.11.7 to 4.11.11 (#​1146) (67586b0)

6.2.52 (2026-06-20)

Bug Fixes

• deps: bump js-yaml from 4.1.1 to 4.2.0 (#​1145) (07f854b)

6.2.51 (2026-06-20)

Bug Fixes

• deps: bump @​oclif/core from 4.11.4 to 4.11.7 (#​1144) (15f0043)

6.2.50 (2026-05-30)

Bug Fixes

• deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#​1135) (197aa95)

6.2.49 (2026-05-16)

Bug Fixes

• deps: bump @​oclif/core from 4.11.1 to 4.11.3 (#​1131) (c43dc02)

6.2.48 (2026-05-09)

Bug Fixes

• deps: bump @​oclif/core from 4.11.0 to 4.11.1 (#​1128) (07da4d0)

6.2.47 (2026-05-09)

Bug Fixes

• deps: bump fast-xml-builder from 1.0.0 to 1.2.0 (#​1126) (ff96a94)

6.2.46 (2026-05-03)

Bug Fixes

• deps: bump @​oclif/core from 4.10.6 to 4.11.0 (#​1124) (67536b4)

6.2.45 (2026-04-26)

Bug Fixes

• deps: bump @​oclif/core from 4.10.5 to 4.10.6 (#​1122) (a433f82)

6.2.44 (2026-04-11)

Bug Fixes

• deps: bump @​oclif/core from 4.10.4 to 4.10.5 (#​1119) (2d777dd)

6.2.43 (2026-04-05)

Bug Fixes

• deps: bump lodash from 4.17.23 to 4.18.1 (#​1114) (4eec1aa)

6.2.42 (2026-04-04)

Bug Fixes

• deps: bump @​oclif/core from 4.10.3 to 4.10.4 (#​1113) (8df7b4f)

6.2.41 (2026-03-29)

Bug Fixes

• deps: bump @​oclif/core from 4.10.2 to 4.10.3 (#​1109) (94dd6ba)

6.2.40 (2026-03-22)

Bug Fixes

• deps: bump @​oclif/core from 4.9.0 to 4.10.2 (#​1107) (4e38fa6)

6.2.39 (2026-03-21)

Bug Fixes

• deps: bump flatted from 3.3.2 to 3.4.2 (#​1104) (30584d8)

6.2.38 (2026-03-14)

Bug Fixes

• deps: bump @​oclif/core from 4.8.3 to 4.9.0 (#​1103) (6ed1cff)

6.2.37 (2026-01-22)

Bug Fixes

• deps: bump lodash from 4.17.21 to 4.17.23 (#​1081) (4a4b1e9)

6.2.36 (2025-11-15)

Bug Fixes

• deps: bump js-yaml from 4.1.0 to 4.1.1 (#​1058) (9a87922)

6.2.35 (2025-11-01)

Bug Fixes

• deps: bump @​oclif/core from 4.7.2 to 4.8.0 (#​1052) (93b6338)

6.2.34 (2025-10-25)

Bug Fixes

• deps: bump @​oclif/core from 4.5.6 to 4.7.2 (

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[dependency-control-plane]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.